This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/lz_wShBEMScRLpNIlFJG1rBoiF4.roa File: lz_wShBEMScRLpNIlFJG1rBoiF4.roa (raw, json) Hash identifier: d/v05QGqY1AL+DPGS5unWRu61oq5dQYWqSy/Y4KvwgA= Subject key identifier: 97:3F:F0:4A:10:44:31:27:11:2E:93:48:94:52:46:D6:B0:68:88:5E Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a Certificate serial: 019B7DCA35C4E94A5DB4385FCA295BB9DD00 Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/lz_wShBEMScRLpNIlFJG1rBoiF4.roa Signing time: Fri 02 Jan 2026 08:19:22 +0000 ROA not before: Fri 02 Jan 2026 08:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 91.194.94.0/23 maxlen: 23 91.212.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:35:c4:e9:4a:5d:b4:38:5f:ca:29:5b:b9:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a Validity Not Before: Jan 2 08:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=973ff04a10443127112e9348945246d6b068885e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8f:65:24:55:89:27:c6:ca:b1:50:4c:15:f8: ce:2e:fe:88:43:b1:34:ed:bc:49:73:fa:8a:c5:24: da:0e:fa:cf:e4:f9:4e:65:0e:57:c2:bb:cd:4d:4f: c6:bb:f9:bd:6a:b9:26:7c:5d:68:bd:df:df:6e:47: a3:b9:b7:c1:18:b5:fe:c7:a0:6d:d6:bd:11:71:2a: 24:7a:2d:23:01:14:ff:ed:55:37:f6:00:b2:d2:d8: 1c:77:c9:33:be:2c:9c:26:22:2e:ff:0a:1b:fc:e0: ca:98:d1:ea:7f:26:58:1b:09:c9:06:fe:80:dd:c2: ad:cc:ae:5b:61:f3:79:37:d5:f4:f7:d8:e3:0e:94: ec:c3:8f:d1:cd:7d:35:36:53:cb:48:f6:50:58:37: 5e:04:1c:56:80:69:83:9a:81:da:01:87:12:84:83: 87:36:9d:73:55:97:22:32:44:2f:c0:a9:9b:b5:d4: 35:79:82:e3:9e:7b:90:54:34:6e:f6:1c:4a:6f:87: 1b:7b:48:1d:32:42:ef:b9:3d:d3:b4:3e:1f:3e:67: ed:bd:d3:b2:38:80:30:22:6a:fe:c8:a8:a5:41:5e: 51:d1:ae:c9:e3:45:df:01:bb:9b:09:27:99:ae:ef: f9:36:c8:dc:16:db:b5:bf:65:30:8b:29:3d:29:60: 2a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3F:F0:4A:10:44:31:27:11:2E:93:48:94:52:46:D6:B0:68:88:5E X509v3 Authority Key Identifier: keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/lz_wShBEMScRLpNIlFJG1rBoiF4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.94.0/23 91.212.28.0/24 Signature Algorithm: sha256WithRSAEncryption 50:87:76:9a:a0:8d:cc:78:94:7b:20:2c:bc:78:70:9a:e8:eb: 9e:32:e7:a4:34:e7:21:ba:fe:92:4a:9a:ef:39:ab:ce:5c:ae: 8e:d4:82:28:99:96:10:fc:28:b1:41:d8:39:d6:f7:57:5d:c6: c8:27:d5:4b:cd:c8:a0:da:b7:e9:94:84:33:89:46:eb:3b:5a: 8b:85:23:61:85:5d:50:97:31:bd:19:b3:8e:29:1d:cd:10:25: 4f:14:06:1d:30:ee:66:e5:b2:58:aa:b9:1d:39:bf:0d:7c:3f: ba:a8:a3:ba:11:29:7a:5c:a5:05:8b:f5:95:f9:4f:f7:66:a6: 2d:55:d4:19:8f:1f:7f:83:5a:a9:4f:64:9a:ab:73:47:10:fb: 1b:b6:cc:8c:ce:5f:1e:66:1f:f7:56:40:fa:0e:55:ec:c4:25: d2:e9:9d:97:9d:d2:93:50:68:2a:b4:1c:c4:b7:41:2b:6f:6c: 2a:5b:7c:ab:79:23:a5:3f:69:18:eb:a4:fc:4e:c5:fc:6d:56: 81:0c:1f:1d:a7:ff:9a:c7:84:43:f5:76:16:0a:7f:e3:eb:8f: e2:10:1c:de:7b:8c:0b:38:1e:8c:55:e0:0d:92:bb:4c:ed:c5: e7:56:67:66:c7:e6:83:37:e4:ac:6a:7b:24:7b:56:6b:82:32: 4a:c4:48:bb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yjXE6UpdtDhfyilbud0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjE1MDI3NmY1NWJhZTQ1NTk4OGQzYTEzZTU5MzQxMDc0 ZGNkMGEwHhcNMjYwMTAyMDgxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzNmZjA0YTEwNDQzMTI3MTEyZTkzNDg5NDUyNDZkNmIwNjg4ODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI9lJFWJJ8bKsVBMFfjOLv6IQ7E0 7bxJc/qKxSTaDvrP5PlOZQ5XwrvNTU/Gu/m9arkmfF1ovd/fbkejubfBGLX+x6Bt 1r0RcSokei0jART/7VU39gCy0tgcd8kzviycJiIu/wob/ODKmNHqfyZYGwnJBv6A 3cKtzK5bYfN5N9X099jjDpTsw4/RzX01NlPLSPZQWDdeBBxWgGmDmoHaAYcShIOH Np1zVZciMkQvwKmbtdQ1eYLjnnuQVDRu9hxKb4cbe0gdMkLvuT3TtD4fPmftvdOy OIAwImr+yKilQV5R0a7J40XfAbubCSeZru/5NsjcFtu1v2Uwiyk9KWAqtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJc/8EoQRDEnES6TSJRSRtawaIheMB8GA1UdIwQY MBaAFM2xUCdvVbrkVZiNOhPlk0EHTc0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEt MzQwN2ZjYTEyMjY3LzEvbHpfd1NoQkVNU2NSTHBOSWxGSkcxckJvaUY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEtMzQwN2ZjYTEyMjY3 LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8JeAwQA W9QcMA0GCSqGSIb3DQEBCwUAA4IBAQBQh3aaoI3MeJR7ICy8eHCa6OueMuekNOch uv6SSprvOavOXK6O1IIomZYQ/CixQdg51vdXXcbIJ9VLzcig2rfplIQziUbrO1qL hSNhhV1QlzG9GbOOKR3NECVPFAYdMO5m5bJYqrkdOb8NfD+6qKO6ESl6XKUFi/WV +U/3ZqYtVdQZjx9/g1qpT2Saq3NHEPsbtsyMzl8eZh/3VkD6DlXsxCXS6Z2XndKT UGgqtBzEt0Erb2wqW3yreSOlP2kY66T8TsX8bVaBDB8dp/+ax4RD9XYWCn/j64/i EBzee4wLOB6MVeANkrtM7cXnVmdmx+aDN+Ssanske1ZrgjJKxEi7 -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:02 2026 by rpki-client